GUAC - Aggregates Software Security Metadata Into A High Fidelity Graph Database
2023-1-26 19:30:0 Author: www.kitploit.com(查看原文) 阅读量:23 收藏

Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide and the "express interest" issue

Graph for Understanding Artifact Composition (GUAC) aggregates software security metadata into a high fidelity graph database—normalizing entity identities and mapping standard relationships between them. Querying this graph can drive higher-level organizational outcomes such as audit, policy, risk management, and even developer assistance.

Conceptually, GUAC occupies the “aggregation and synthesis” layer of the software supply chain transparency logical model:

A few examples of questions answered by GUAC include:

Quickstart

Refer to the Setup + Demo document to learn how to prepare your environment and try GUAC out!

Architecture

Here is an overview of the architecture of GUAC:

Supported input formats

Additional References

Communication

We encourage discussions to be done on github issues. We also have a public slack channel on the OpenSSF slack.

For security issues or code of conduct concerns, an e-mail should be sent to [email protected].

Governance

Information about governance can be found here.

GUAC - Aggregates Software Security Metadata Into A High Fidelity Graph Database GUAC - Aggregates Software Security Metadata Into A High Fidelity Graph Database Reviewed by Zion3R on 8:30 AM Rating: 5


文章来源: http://www.kitploit.com/2023/01/guac-aggregates-software-security.html
如有侵权请联系:admin#unsafe.sh